This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json) Hash identifier: L/cxJnO/9qeeBHhAkwP9umqFm1jY7RQ0IKLJMrl6mrc= Subject key identifier: 74:4A:2D:26:BB:BB:B7:86:4A:CF:B2:2A:EC:BA:6B:C5:D7:7B:73:BE Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4 Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4 Certificate serial: 019AF19BBA527CC1520BBC451391297A1EB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft Manifest number: 1660 Signing time: Sat 06 Dec 2025 03:01:46 +0000 Manifest this update: Sat 06 Dec 2025 03:01:46 +0000 Manifest next update: Sun 07 Dec 2025 03:01:46 +0000 Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: J680rupKiA5C9I3kc/abOejn/07SqgufXTvWIOcypc0=) 2: xyAqUo1cBCxwcVbYVeKIYjCComY.roa (hash: 5YKuscwS6gvAjWMFAp+aYRLvaxsng69DrIJ3z9uUMo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:ba:52:7c:c1:52:0b:bc:45:13:91:29:7a:1e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4 Validity Not Before: Dec 6 03:01:46 2025 GMT Not After : Dec 7 03:01:46 2025 GMT Subject: CN=744a2d26bbbbb7864acfb22aecba6bc5d77b73be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:99:f8:0f:fa:b5:31:6f:66:97:57:37:0d: aa:b7:63:81:25:7c:08:6a:42:3a:d7:1a:fd:f6:48: ea:57:ed:ad:88:82:c9:15:86:d0:9d:85:6b:be:df: 62:97:89:be:57:0b:eb:55:07:78:81:96:43:c2:55: fc:5f:41:dc:62:d0:78:3f:83:57:1c:a1:e3:5d:aa: a2:a1:e0:ed:ee:82:a4:cc:d4:a2:ad:fb:89:9c:a3: b9:2b:14:aa:c6:86:eb:96:7a:71:11:bd:0d:27:1f: f7:e0:84:48:a7:66:35:87:a5:94:7d:7e:8e:c1:f6: 4a:fc:44:9a:2d:dc:1b:7a:36:a0:73:31:53:9f:c0: 3c:bd:45:ff:8d:44:ab:6d:20:6d:71:d5:cc:55:64: ab:d7:71:73:6b:a2:10:08:95:39:43:15:b5:7e:30: de:b6:10:63:ae:d3:a9:f1:34:12:ac:da:3a:86:fc: 18:d6:58:e8:b0:5d:2a:03:28:04:66:fc:52:42:b3: 56:1c:a4:48:ca:be:0d:53:8b:f5:31:5e:ce:31:a8: c8:8d:23:96:40:0a:33:ca:e6:e9:03:14:5e:5b:6b: 1e:3b:4d:91:b8:83:a0:82:38:b1:81:ff:f6:a0:ca: 7b:4e:06:bd:3c:e9:c8:d7:b1:94:fc:70:2d:1b:e1: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4A:2D:26:BB:BB:B7:86:4A:CF:B2:2A:EC:BA:6B:C5:D7:7B:73:BE X509v3 Authority Key Identifier: keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:87:b4:ed:68:2f:a8:ad:6f:60:0f:3c:98:f7:5f:5e:ce:69: 6b:ca:7a:5c:61:f4:23:e1:c5:d3:57:2b:ee:da:bf:a5:1a:21: 6c:50:23:e1:df:10:1c:9b:c4:16:ac:90:7b:ca:8b:46:fa:1e: 1f:8d:ca:17:b1:56:8f:d7:6d:a3:30:2d:a8:91:55:49:df:80: 22:8a:a3:2e:25:2c:c4:6a:8a:69:02:12:bb:35:39:20:5a:c0: 68:e2:a5:81:b5:7b:76:ac:fd:be:d3:7a:cc:66:fe:37:b3:d1: be:52:e4:e5:f2:e1:59:9a:f6:28:c7:96:10:f6:b6:68:4f:ed: 2f:3c:ac:08:05:8f:d5:2c:8e:9b:0c:0c:fe:ae:dd:2a:3d:5a: 57:3a:2b:5d:ae:b2:a2:95:ec:3e:9e:ae:da:f5:31:4f:28:12: 23:2d:c8:42:1e:a7:3a:de:aa:86:80:7b:df:08:e5:f6:a8:9a: 3a:3a:10:49:15:35:ae:77:18:9d:ff:0a:7b:02:25:63:4e:9e: 78:ca:26:51:ad:18:aa:2f:68:73:4a:24:53:6c:b2:07:58:62: cc:1d:0f:cd:fd:bf:f6:06:20:45:05:f9:d3:bb:b7:64:4f:32: 0a:24:cf:40:c4:17:97:a3:f6:2d:43:9a:3b:d2:31:2b:8f:72: 5e:d0:14:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7pSfMFSC7xFE5Epeh6yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDJjMzU2MTJmNDVhZjQxMTAzNTIwYWYyNzYxY2RhYTUx ZTNhYTQwHhcNMjUxMjA2MDMwMTQ2WhcNMjUxMjA3MDMwMTQ2WjAzMTEwLwYDVQQD Eyg3NDRhMmQyNmJiYmJiNzg2NGFjZmIyMmFlY2JhNmJjNWQ3N2I3M2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAuZ+A/6tTFvZpdXNw2qt2OBJXwI akI61xr99kjqV+2tiILJFYbQnYVrvt9il4m+VwvrVQd4gZZDwlX8X0HcYtB4P4NX HKHjXaqioeDt7oKkzNSirfuJnKO5KxSqxobrlnpxEb0NJx/34IRIp2Y1h6WUfX6O wfZK/ESaLdwbejagczFTn8A8vUX/jUSrbSBtcdXMVWSr13Fza6IQCJU5QxW1fjDe thBjrtOp8TQSrNo6hvwY1ljosF0qAygEZvxSQrNWHKRIyr4NU4v1MV7OMajIjSOW QAozyubpAxReW2seO02RuIOggjixgf/2oMp7Tga9POnI17GU/HAtG+GLsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRKLSa7u7eGSs+yKuy6a8XXe3O+MB8GA1UdIwQY MBaAFF5Cw1YS9Fr0EQNSCvJ2HNqlHjqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYt ODIxMTk5NzhkNmJiLzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYtODIxMTk5NzhkNmJi LzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4e07Wgv qK1vYA88mPdfXs5pa8p6XGH0I+HF01cr7tq/pRohbFAj4d8QHJvEFqyQe8qLRvoe H43KF7FWj9dtozAtqJFVSd+AIoqjLiUsxGqKaQISuzU5IFrAaOKlgbV7dqz9vtN6 zGb+N7PRvlLk5fLhWZr2KMeWEPa2aE/tLzysCAWP1SyOmwwM/q7dKj1aVzorXa6y opXsPp6u2vUxTygSIy3IQh6nOt6qhoB73wjl9qiaOjoQSRU1rncYnf8KewIlY06e eMomUa0Yqi9oc0okU2yyB1hizB0Pzf2/9gYgRQX507u3ZE8yCiTPQMQXl6P2LUOa O9IxK49yXtAUQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:38 2025 by rpki-client